- Freeradius-Users - lists.freeradius.org

Freeradius 3.0.4 DHCP MYSQL MAC Auth dhclient
by bubulak＠radiolan.sk 22 Sep '14

22 Sep '14

Hi i trying to configure Freeradius 3.0.4 with DHCP server with backend on Mysql DB and authorization against MAC adresses. Problem is that this configuration don't work with standart dhclient only with dhcpd5 (in debian 7.6). root@radius-test:/opt/freeradius/etc/raddb/sites-enabled# /opt/freeradius/sbin/radiusd -X radiusd: FreeRADIUS Version 3.0.4, for host x86_64-unknown-linux-gnu, built on Sep 20 2014 at 14:51:22 Copyright (C) 1999-2014 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /opt/freeradius/share/freeradius/dictionary including dictionary file /opt/freeradius/share/freeradius/dictionary.dhcp including dictionary file /opt/freeradius/share/freeradius/dictionary.vqp including dictionary file /opt/freeradius/etc/raddb/dictionary including configuration file /opt/freeradius/etc/raddb/radiusd.conf including configuration file /opt/freeradius/etc/raddb/proxy.conf including configuration file /opt/freeradius/etc/raddb/clients.conf including files in directory /opt/freeradius/etc/raddb/mods-enabled/ including configuration file /opt/freeradius/etc/raddb/mods-enabled/always including configuration file /opt/freeradius/etc/raddb/mods-enabled/attr_filter including configuration file /opt/freeradius/etc/raddb/mods-enabled/cache_eap including configuration file /opt/freeradius/etc/raddb/mods-enabled/chap including configuration file /opt/freeradius/etc/raddb/mods-enabled/detail including configuration file /opt/freeradius/etc/raddb/mods-enabled/detail.log including configuration file /opt/freeradius/etc/raddb/mods-enabled/digest including configuration file /opt/freeradius/etc/raddb/mods-enabled/dhcp including configuration file /opt/freeradius/etc/raddb/mods-enabled/dynamic_clients including configuration file /opt/freeradius/etc/raddb/mods-enabled/eap including configuration file /opt/freeradius/etc/raddb/mods-enabled/echo including configuration file /opt/freeradius/etc/raddb/mods-enabled/exec including configuration file /opt/freeradius/etc/raddb/mods-enabled/expiration including configuration file /opt/freeradius/etc/raddb/mods-enabled/expr including configuration file /opt/freeradius/etc/raddb/mods-enabled/files including configuration file /opt/freeradius/etc/raddb/mods-enabled/linelog including configuration file /opt/freeradius/etc/raddb/mods-enabled/logintime including configuration file /opt/freeradius/etc/raddb/mods-enabled/mschap including configuration file /opt/freeradius/etc/raddb/mods-enabled/ntlm_auth including configuration file /opt/freeradius/etc/raddb/mods-enabled/pap including configuration file /opt/freeradius/etc/raddb/mods-enabled/passwd including configuration file /opt/freeradius/etc/raddb/mods-enabled/preprocess including configuration file /opt/freeradius/etc/raddb/mods-enabled/radutmp including configuration file /opt/freeradius/etc/raddb/mods-enabled/realm including configuration file /opt/freeradius/etc/raddb/mods-enabled/replicate including configuration file /opt/freeradius/etc/raddb/mods-enabled/soh including configuration file /opt/freeradius/etc/raddb/mods-enabled/sradutmp including configuration file /opt/freeradius/etc/raddb/mods-enabled/unix including configuration file /opt/freeradius/etc/raddb/mods-enabled/unpack including configuration file /opt/freeradius/etc/raddb/mods-enabled/utf8 including configuration file /opt/freeradius/etc/raddb/mods-enabled/sql including configuration file /opt/freeradius/etc/raddb/mods-config/sql/main/mysql/queries.conf including files in directory /opt/freeradius/etc/raddb/policy.d/ including configuration file /opt/freeradius/etc/raddb/policy.d/accounting including configuration file /opt/freeradius/etc/raddb/policy.d/canonicalization including configuration file /opt/freeradius/etc/raddb/policy.d/control including configuration file /opt/freeradius/etc/raddb/policy.d/cui including configuration file /opt/freeradius/etc/raddb/policy.d/debug including configuration file /opt/freeradius/etc/raddb/policy.d/dhcp including configuration file /opt/freeradius/etc/raddb/policy.d/eap including configuration file /opt/freeradius/etc/raddb/policy.d/filter including configuration file /opt/freeradius/etc/raddb/policy.d/operator-name including files in directory /opt/freeradius/etc/raddb/sites-enabled/ including configuration file /opt/freeradius/etc/raddb/sites-enabled/default including configuration file /opt/freeradius/etc/raddb/sites-enabled/inner-tunnel including configuration file /opt/freeradius/etc/raddb/sites-enabled/dhcp main { security { allow_core_dumps = no } } main { name = "radiusd" prefix = "/opt/freeradius" localstatedir = "/opt/freeradius/var" sbindir = "/opt/freeradius/sbin" logdir = "/opt/freeradius/var/log/radius" run_dir = "/opt/freeradius/var/run/radiusd" libdir = "/opt/freeradius/lib" radacctdir = "/opt/freeradius/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 pidfile = "/opt/freeradius/var/run/radiusd/radiusd.pid" checkrad = "/opt/freeradius/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no colourise = yes msg_denied = "You are already logged in - access denied" } security { max_attributes = 200 reject_delay = 1 status_server = yes allow_vulnerable_openssl = "yes" } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = <<< secret >>> response_window = 20.000000 response_timeouts = 1 max_outstanding = 65536 zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 check_timeout = 4 num_answers_to_alive = 3 revive_interval = 120 coa { irt = 2 mrt = 16 mrc = 5 mrd = 30 } limit { max_connections = 16 max_requests = 0 lifetime = 0 idle_timeout = 0 } } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = <<< secret >>> nas_type = "other" proto = "*" limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } client localhost_ipv6 { ipv6addr = ::1 require_message_authenticator = no secret = <<< secret >>> limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } radiusd: #### Instantiating modules #### instantiate { } modules { # Loaded module rlm_always # Instantiating module "reject" from file /opt/freeradius/etc/raddb/mods-enabled/always always reject { rcode = "reject" simulcount = 0 mpp = no } # Instantiating module "fail" from file /opt/freeradius/etc/raddb/mods-enabled/always always fail { rcode = "fail" simulcount = 0 mpp = no } # Instantiating module "ok" from file /opt/freeradius/etc/raddb/mods-enabled/always always ok { rcode = "ok" simulcount = 0 mpp = no } # Instantiating module "handled" from file /opt/freeradius/etc/raddb/mods-enabled/always always handled { rcode = "handled" simulcount = 0 mpp = no } # Instantiating module "invalid" from file /opt/freeradius/etc/raddb/mods-enabled/always always invalid { rcode = "invalid" simulcount = 0 mpp = no } # Instantiating module "userlock" from file /opt/freeradius/etc/raddb/mods-enabled/always always userlock { rcode = "userlock" simulcount = 0 mpp = no } # Instantiating module "notfound" from file /opt/freeradius/etc/raddb/mods-enabled/always always notfound { rcode = "notfound" simulcount = 0 mpp = no } # Instantiating module "noop" from file /opt/freeradius/etc/raddb/mods-enabled/always always noop { rcode = "noop" simulcount = 0 mpp = no } # Instantiating module "updated" from file /opt/freeradius/etc/raddb/mods-enabled/always always updated { rcode = "updated" simulcount = 0 mpp = no } # Loaded module rlm_attr_filter # Instantiating module "attr_filter.post-proxy" from file /opt/freeradius/etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.post-proxy { filename = "/opt/freeradius/etc/raddb/mods-config/attr_filter/post-proxy" key = "%{Realm}" relaxed = no } reading pairlist file /opt/freeradius/etc/raddb/mods-config/attr_filter/post-proxy # Instantiating module "attr_filter.pre-proxy" from file /opt/freeradius/etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.pre-proxy { filename = "/opt/freeradius/etc/raddb/mods-config/attr_filter/pre-proxy" key = "%{Realm}" relaxed = no } reading pairlist file /opt/freeradius/etc/raddb/mods-config/attr_filter/pre-proxy # Instantiating module "attr_filter.access_reject" from file /opt/freeradius/etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.access_reject { filename = "/opt/freeradius/etc/raddb/mods-config/attr_filter/access_reject" key = "%{User-Name}" relaxed = no } reading pairlist file /opt/freeradius/etc/raddb/mods-config/attr_filter/access_reject # Instantiating module "attr_filter.access_challenge" from file /opt/freeradius/etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.access_challenge { filename = "/opt/freeradius/etc/raddb/mods-config/attr_filter/access_challenge" key = "%{User-Name}" relaxed = no } reading pairlist file /opt/freeradius/etc/raddb/mods-config/attr_filter/access_challenge # Instantiating module "attr_filter.accounting_response" from file /opt/freeradius/etc/raddb/mods-enabled/attr_filter attr_filter attr_filter.accounting_response { filename = "/opt/freeradius/etc/raddb/mods-config/attr_filter/accounting_response" key = "%{User-Name}" relaxed = no } reading pairlist file /opt/freeradius/etc/raddb/mods-config/attr_filter/accounting_response # Loaded module rlm_cache # Instantiating module "cache_eap" from file /opt/freeradius/etc/raddb/mods-enabled/cache_eap cache cache_eap { key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}" ttl = 15 max_entries = 16384 epoch = 0 add_stats = no } # Loaded module rlm_chap # Instantiating module "chap" from file /opt/freeradius/etc/raddb/mods-enabled/chap # Loaded module rlm_detail # Instantiating module "detail" from file /opt/freeradius/etc/raddb/mods-enabled/detail detail { filename = "/opt/freeradius/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" header = "%t" permissions = 384 locking = no log_packet_header = no } # Instantiating module "auth_log" from file /opt/freeradius/etc/raddb/mods-enabled/detail.log detail auth_log { filename = "/opt/freeradius/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" header = "%t" permissions = 384 locking = no log_packet_header = no } rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output # Instantiating module "reply_log" from file /opt/freeradius/etc/raddb/mods-enabled/detail.log detail reply_log { filename = "/opt/freeradius/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" header = "%t" permissions = 384 locking = no log_packet_header = no } # Instantiating module "pre_proxy_log" from file /opt/freeradius/etc/raddb/mods-enabled/detail.log detail pre_proxy_log { filename = "/opt/freeradius/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" header = "%t" permissions = 384 locking = no log_packet_header = no } # Instantiating module "post_proxy_log" from file /opt/freeradius/etc/raddb/mods-enabled/detail.log detail post_proxy_log { filename = "/opt/freeradius/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" header = "%t" permissions = 384 locking = no log_packet_header = no } # Loaded module rlm_digest # Instantiating module "digest" from file /opt/freeradius/etc/raddb/mods-enabled/digest # Loaded module rlm_dhcp # Instantiating module "dhcp" from file /opt/freeradius/etc/raddb/mods-enabled/dhcp # Loaded module rlm_dynamic_clients # Instantiating module "dynamic_clients" from file /opt/freeradius/etc/raddb/mods-enabled/dynamic_clients # Loaded module rlm_eap # Instantiating module "eap" from file /opt/freeradius/etc/raddb/mods-enabled/eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no mod_accounting_username_bug = no max_sessions = 1024 } # Linked to sub-module rlm_eap_md5 # Linked to sub-module rlm_eap_leap # Linked to sub-module rlm_eap_gtc gtc { challenge = "Password: " auth_type = "PAP" } # Linked to sub-module rlm_eap_tls tls { tls = "tls-common" } tls-config tls-common { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 ca_path = "/opt/freeradius/etc/raddb/certs" pem_file_type = yes private_key_file = "/opt/freeradius/etc/raddb/certs/server.pem" certificate_file = "/opt/freeradius/etc/raddb/certs/server.pem" ca_file = "/opt/freeradius/etc/raddb/certs/ca.pem" private_key_password = <<< secret >>> dh_file = "/opt/freeradius/etc/raddb/certs/dh" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" ecdh_curve = "prime256v1" cache { enable = yes lifetime = 24 max_entries = 255 } verify { } ocsp { enable = no override_cert_url = yes url = "http://127.0.0.1/ocsp/" use_nonce = yes timeout = 0 softfail = yes } } # Linked to sub-module rlm_eap_ttls ttls { tls = "tls-common" default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes require_client_cert = no } Using cached TLS configuration from previous invocation # Linked to sub-module rlm_eap_peap peap { tls = "tls-common" default_method = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" soh = no require_client_cert = no } Using cached TLS configuration from previous invocation # Linked to sub-module rlm_eap_mschapv2 mschapv2 { with_ntdomain_hack = no send_error = no } # Loaded module rlm_exec # Instantiating module "echo" from file /opt/freeradius/etc/raddb/mods-enabled/echo exec echo { wait = yes program = "/bin/echo %{User-Name}" input_pairs = "request" output_pairs = "reply" shell_escape = yes } # Instantiating module "exec" from file /opt/freeradius/etc/raddb/mods-enabled/exec exec { wait = no input_pairs = "request" shell_escape = yes timeout = 10 } # Loaded module rlm_expiration # Instantiating module "expiration" from file /opt/freeradius/etc/raddb/mods-enabled/expiration # Loaded module rlm_expr # Instantiating module "expr" from file /opt/freeradius/etc/raddb/mods-enabled/expr expr { safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" } # Loaded module rlm_files # Instantiating module "files" from file /opt/freeradius/etc/raddb/mods-enabled/files files { filename = "/opt/freeradius/etc/raddb/mods-config/files/authorize" usersfile = "/opt/freeradius/etc/raddb/mods-config/files/authorize" acctusersfile = "/opt/freeradius/etc/raddb/mods-config/files/accounting" preproxy_usersfile = "/opt/freeradius/etc/raddb/mods-config/files/pre-proxy" compat = "cistron" } reading pairlist file /opt/freeradius/etc/raddb/mods-config/files/authorize [/opt/freeradius/etc/raddb/mods-config/files/authorize]:181 Cistron compatibility checks for entry DEFAULT ... [/opt/freeradius/etc/raddb/mods-config/files/authorize]:188 Cistron compatibility checks for entry DEFAULT ... [/opt/freeradius/etc/raddb/mods-config/files/authorize]:195 Cistron compatibility checks for entry DEFAULT ... reading pairlist file /opt/freeradius/etc/raddb/mods-config/files/authorize [/opt/freeradius/etc/raddb/mods-config/files/authorize]:181 Cistron compatibility checks for entry DEFAULT ... [/opt/freeradius/etc/raddb/mods-config/files/authorize]:188 Cistron compatibility checks for entry DEFAULT ... [/opt/freeradius/etc/raddb/mods-config/files/authorize]:195 Cistron compatibility checks for entry DEFAULT ... reading pairlist file /opt/freeradius/etc/raddb/mods-config/files/accounting reading pairlist file /opt/freeradius/etc/raddb/mods-config/files/pre-proxy # Loaded module rlm_linelog # Instantiating module "linelog" from file /opt/freeradius/etc/raddb/mods-enabled/linelog linelog { filename = "/opt/freeradius/var/log/radius/linelog" permissions = 384 format = "This is a log message for %{User-Name}" reference = "messages.%{%{Packet-Type}:-default}" } # Instantiating module "log_accounting" from file /opt/freeradius/etc/raddb/mods-enabled/linelog linelog log_accounting { filename = "/opt/freeradius/var/log/radius/linelog-accounting" permissions = 384 format = "" reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}" } # Loaded module rlm_logintime # Instantiating module "logintime" from file /opt/freeradius/etc/raddb/mods-enabled/logintime logintime { minimum_timeout = 60 } # Loaded module rlm_mschap # Instantiating module "mschap" from file /opt/freeradius/etc/raddb/mods-enabled/mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = yes passchange { } allow_retry = yes } # Instantiating module "ntlm_auth" from file /opt/freeradius/etc/raddb/mods-enabled/ntlm_auth exec ntlm_auth { wait = yes program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" shell_escape = yes } # Loaded module rlm_pap # Instantiating module "pap" from file /opt/freeradius/etc/raddb/mods-enabled/pap pap { normalise = yes } # Loaded module rlm_passwd # Instantiating module "etc_passwd" from file /opt/freeradius/etc/raddb/mods-enabled/passwd passwd etc_passwd { filename = "/etc/passwd" format = "*User-Name:Crypt-Password:" delimiter = ":" ignore_nislike = no ignore_empty = yes allow_multiple_keys = no hash_size = 100 } rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no # Loaded module rlm_preprocess # Instantiating module "preprocess" from file /opt/freeradius/etc/raddb/mods-enabled/preprocess preprocess { huntgroups = "/opt/freeradius/etc/raddb/mods-config/preprocess/huntgroups" hints = "/opt/freeradius/etc/raddb/mods-config/preprocess/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } reading pairlist file /opt/freeradius/etc/raddb/mods-config/preprocess/huntgroups reading pairlist file /opt/freeradius/etc/raddb/mods-config/preprocess/hints # Loaded module rlm_radutmp # Instantiating module "radutmp" from file /opt/freeradius/etc/raddb/mods-enabled/radutmp radutmp { filename = "/opt/freeradius/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes permissions = 384 caller_id = yes } # Loaded module rlm_realm # Instantiating module "IPASS" from file /opt/freeradius/etc/raddb/mods-enabled/realm realm IPASS { format = "prefix" delimiter = "/" ignore_default = no ignore_null = no } # Instantiating module "suffix" from file /opt/freeradius/etc/raddb/mods-enabled/realm realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } # Instantiating module "realmpercent" from file /opt/freeradius/etc/raddb/mods-enabled/realm realm realmpercent { format = "suffix" delimiter = "%" ignore_default = no ignore_null = no } # Instantiating module "ntdomain" from file /opt/freeradius/etc/raddb/mods-enabled/realm realm ntdomain { format = "prefix" delimiter = "\" ignore_default = no ignore_null = no } # Loaded module rlm_replicate # Instantiating module "replicate" from file /opt/freeradius/etc/raddb/mods-enabled/replicate # Loaded module rlm_soh # Instantiating module "soh" from file /opt/freeradius/etc/raddb/mods-enabled/soh soh { dhcp = yes } # Instantiating module "sradutmp" from file /opt/freeradius/etc/raddb/mods-enabled/sradutmp radutmp sradutmp { filename = "/opt/freeradius/var/log/radius/sradutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes permissions = 420 caller_id = no } # Loaded module rlm_unix # Instantiating module "unix" from file /opt/freeradius/etc/raddb/mods-enabled/unix unix { radwtmp = "/opt/freeradius/var/log/radius/radwtmp" } # Loaded module rlm_unpack # Instantiating module "unpack" from file /opt/freeradius/etc/raddb/mods-enabled/unpack # Loaded module rlm_utf8 # Instantiating module "utf8" from file /opt/freeradius/etc/raddb/mods-enabled/utf8 # Loaded module rlm_sql # Instantiating module "sql" from file /opt/freeradius/etc/raddb/mods-enabled/sql sql { driver = "rlm_sql_mysql" server = "localhost" port = "3306" login = "root" password = <<< secret >>> radius_db = "radius" read_groups = yes read_profiles = yes read_clients = no delete_stale_sessions = yes sql_user_name = "%{DHCP-Client-Hardware-Address}" default_user_profile = "" client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id" group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" simul_count_query = "" simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" } accounting { reference = "%{tolower:type.%{Acct-Status-Type}.query}" } post-auth { reference = ".query" } mysql { tls { } } rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to database "radius" rlm_sql (sql): Initialising connection pool pool { start = 5 min = 4 max = 32 spare = 3 uses = 0 lifetime = 0 cleanup_interval = 30 idle_timeout = 60 retry_delay = 1 spread = no } rlm_sql (sql): Opening additional connection (0) rlm_sql_mysql: Starting connect to MySQL server rlm_sql (sql): Opening additional connection (1) rlm_sql_mysql: Starting connect to MySQL server rlm_sql (sql): Opening additional connection (2) rlm_sql_mysql: Starting connect to MySQL server rlm_sql (sql): Opening additional connection (3) rlm_sql_mysql: Starting connect to MySQL server rlm_sql (sql): Opening additional connection (4) rlm_sql_mysql: Starting connect to MySQL server } # modules radiusd: #### Loading Virtual Servers #### server { # from file /opt/freeradius/etc/raddb/radiusd.conf } # server server default { # from file /opt/freeradius/etc/raddb/sites-enabled/default # Creating Auth-Type = digest # Loading authenticate {...} # Loading authorize {...} Ignoring "ldap" (see raddb/mods-available/README.rst) # Loading preacct {...} # Loading accounting {...} # Loading post-proxy {...} # Loading post-auth {...} } # server default server inner-tunnel { # from file /opt/freeradius/etc/raddb/sites-enabled/inner-tunnel # Loading authenticate {...} # Loading authorize {...} # Loading session {...} # Loading post-proxy {...} # Loading post-auth {...} } # server inner-tunnel server dhcp { # from file /opt/freeradius/etc/raddb/sites-enabled/dhcp # Loading dhcp DHCP-Discover {...} # Loading dhcp DHCP-Request {...} # Loading dhcp {...} } # server dhcp radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "acct" ipaddr = * port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "auth" ipv6addr = :: port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "acct" ipv6addr = :: port = 0 limit { max_connections = 16 lifetime = 0 idle_timeout = 30 } } listen { type = "auth" ipaddr = 127.0.0.1 port = 18120 } listen { type = "dhcp" ipaddr = 0.0.0.0 port = 67 src_ipaddr = 193.93.72.40 } Listening on auth address * port 1812 as server default Listening on acct address * port 1813 as server default Listening on auth address :: port 1812 as server default Listening on acct address :: port 1813 as server default Listening on auth address 127.0.0.1 port 18120 as server inner-tunnel Listening on dhcp interface eth0 address * port 67 as server dhcp Opening new proxy socket 'proxy address * port 0' Listening on proxy address * port 47158 Ready to process requests Received DHCP-Discover of Id ee2f4270 from 0.0.0.0:68 to 255.255.255.255:67 DHCP-Opcode = Client-Message DHCP-Hardware-Type = Ethernet DHCP-Hardware-Address-Length = 6 DHCP-Hop-Count = 0 DHCP-Transaction-Id = 3996074608 DHCP-Number-of-Seconds = 0 DHCP-Flags = 0 DHCP-Client-IP-Address = 0.0.0.0 DHCP-Your-IP-Address = 0.0.0.0 DHCP-Server-IP-Address = 0.0.0.0 DHCP-Gateway-IP-Address = 0.0.0.0 DHCP-Client-Hardware-Address = 00:16:3e:c3:3a:d1 DHCP-Message-Type += DHCP-Discover DHCP-Requested-IP-Address += 193.93.72.41 DHCP-Hostname += 'test' DHCP-Parameter-Request-List += DHCP-Subnet-Mask DHCP-Parameter-Request-List += DHCP-Broadcast-Address DHCP-Parameter-Request-List += DHCP-Time-Offset DHCP-Parameter-Request-List += DHCP-Router-Address DHCP-Parameter-Request-List += DHCP-Domain-Name DHCP-Parameter-Request-List += DHCP-Domain-Name-Server DHCP-Parameter-Request-List += DHCP-Domain-Search DHCP-Parameter-Request-List += DHCP-Hostname DHCP-Parameter-Request-List += DHCP-NETBIOS-Name-Servers DHCP-Parameter-Request-List += DHCP-NETBIOS DHCP-Parameter-Request-List += DHCP-Interface-MTU-Size DHCP-Parameter-Request-List += DHCP-Classless-Static-Route DHCP-Parameter-Request-List += DHCP-NTP-Servers (0) Received packet from host 0.0.0.0 port 68 code=1025, id=-298892688, length=300 (0) DHCP-Opcode = Client-Message (0) DHCP-Hardware-Type = Ethernet (0) DHCP-Hardware-Address-Length = 6 (0) DHCP-Hop-Count = 0 (0) DHCP-Transaction-Id = 3996074608 (0) DHCP-Number-of-Seconds = 0 (0) DHCP-Flags = 0 (0) DHCP-Client-IP-Address = 0.0.0.0 (0) DHCP-Your-IP-Address = 0.0.0.0 (0) DHCP-Server-IP-Address = 0.0.0.0 (0) DHCP-Gateway-IP-Address = 0.0.0.0 (0) DHCP-Client-Hardware-Address = 00:16:3e:c3:3a:d1 (0) DHCP-Message-Type += DHCP-Discover (0) DHCP-Requested-IP-Address += 193.93.72.41 (0) DHCP-Hostname += 'test' (0) DHCP-Parameter-Request-List += DHCP-Subnet-Mask (0) DHCP-Parameter-Request-List += DHCP-Broadcast-Address (0) DHCP-Parameter-Request-List += DHCP-Time-Offset (0) DHCP-Parameter-Request-List += DHCP-Router-Address (0) DHCP-Parameter-Request-List += DHCP-Domain-Name (0) DHCP-Parameter-Request-List += DHCP-Domain-Name-Server (0) DHCP-Parameter-Request-List += DHCP-Domain-Search (0) DHCP-Parameter-Request-List += DHCP-Hostname (0) DHCP-Parameter-Request-List += DHCP-NETBIOS-Name-Servers (0) DHCP-Parameter-Request-List += DHCP-NETBIOS (0) DHCP-Parameter-Request-List += DHCP-Interface-MTU-Size (0) DHCP-Parameter-Request-List += DHCP-Classless-Static-Route (0) DHCP-Parameter-Request-List += DHCP-NTP-Servers Trying sub-section dhcp DHCP-Discover {...} (0) dhcp DHCP-Discover { (0) update reply { (0) DHCP-Message-Type = DHCP-Offer (0) DHCP-NTP-Servers = 193.93.72.11 (0) } # update reply = noop (0) update reply { (0) DHCP-Domain-Name-Server = 193.93.72.10 (0) DHCP-Domain-Name-Server = 193.93.72.1 (0) DHCP-IP-Address-Lease-Time = 600 (0) DHCP-DHCP-Server-Identifier = 193.93.72.40 (0) } # update reply = noop (0) sql : EXPAND %{DHCP-Client-Hardware-Address} (0) sql : --> 00:16:3e:c3:3a:d1 (0) sql : SQL-User-Name set to '00:16:3e:c3:3a:d1' rlm_sql (sql): Reserved connection (4) (0) sql : EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id (0) sql : --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = '00:16:3e:c3:3a:d1' ORDER BY id rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radcheck WHERE username = '00:16:3e:c3:3a:d1' ORDER BY id' (0) sql : User found in radcheck table (0) sql : Check items matched (0) sql : EXPAND SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id (0) sql : --> SELECT id, username, attribute, value, op FROM radreply WHERE username = '00:16:3e:c3:3a:d1' ORDER BY id rlm_sql (sql): Executing query: 'SELECT id, username, attribute, value, op FROM radreply WHERE username = '00:16:3e:c3:3a:d1' ORDER BY id' (0) sql : User found in radreply table (0) sql : EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority (0) sql : --> SELECT groupname FROM radusergroup WHERE username = '00:16:3e:c3:3a:d1' ORDER BY priority rlm_sql (sql): Executing query: 'SELECT groupname FROM radusergroup WHERE username = '00:16:3e:c3:3a:d1' ORDER BY priority' (0) sql : User not found in any groups rlm_sql (sql): Released connection (4) (0) [sql.authorize] = ok (0) sql : EXPAND .query (0) sql : --> .query (0) sql : Using query template 'query' rlm_sql (sql): Reserved connection (4) (0) sql : EXPAND %{DHCP-Client-Hardware-Address} (0) sql : --> 00:16:3e:c3:3a:d1 (0) sql : SQL-User-Name set to '00:16:3e:c3:3a:d1' (0) sql : EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') (0) sql : --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '00:16:3e:c3:3a:d1', '', '0', '2014-09-20 16:21:43') rlm_sql (sql): Executing query: 'INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '00:16:3e:c3:3a:d1', '', '0', '2014-09-20 16:21:43')' rlm_sql (sql): Released connection (4) (0) [sql.post-auth] = ok (0) [ok] = ok (0) } # dhcp DHCP-Discover = ok (0) DHCP: Reply will be unicast to your-ip-address (0) Sending packet to host 193.93.72.41 port 68 code=1026, id=-298892688, length=0 (0) DHCP-Message-Type = DHCP-Offer (0) DHCP-NTP-Servers = 193.93.72.11 (0) DHCP-Domain-Name-Server = 193.93.72.10 (0) DHCP-IP-Address-Lease-Time = 600 (0) DHCP-DHCP-Server-Identifier = 193.93.72.40 (0) DHCP-Your-IP-Address = 193.93.72.41 (0) DHCP-Subnet-Mask = 255.255.255.192 (0) DHCP-Router-Address = 193.93.72.30 (0) DHCP-Domain-Name = 'radiolan.sk' (0) DHCP-Opcode = Server-Message (0) DHCP-Hardware-Type = Ethernet (0) DHCP-Hardware-Address-Length = 6 (0) DHCP-Hop-Count = 0 (0) DHCP-Transaction-Id = 3996074608 (0) DHCP-Flags = 0 (0) DHCP-Client-IP-Address = 0.0.0.0 (0) DHCP-Gateway-IP-Address = 0.0.0.0 (0) DHCP-Client-Hardware-Address = 00:16:3e:c3:3a:d1 DHCP-Opcode = Server-Message DHCP-Hardware-Type = Ethernet DHCP-Hardware-Address-Length = 6 DHCP-Hop-Count = 0 DHCP-Transaction-Id = 3996074608 DHCP-Number-of-Seconds = 0 DHCP-Flags = 0 DHCP-Client-IP-Address = 0.0.0.0 DHCP-Your-IP-Address = 193.93.72.41 DHCP-Server-IP-Address = 193.93.72.40 DHCP-Gateway-IP-Address = 0.0.0.0 DHCP-Client-Hardware-Address = 00:16:3e:c3:3a:d1 DHCP-Server-Host-Name = '' DHCP-Boot-Filename = '' DHCP-Subnet-Mask = 255.255.255.192 DHCP-Router-Address = 193.93.72.30 DHCP-Domain-Name-Server = 193.93.72.10 DHCP-Domain-Name = 'radiolan.sk' DHCP-NTP-Servers = 193.93.72.11 DHCP-IP-Address-Lease-Time = 600 DHCP-DHCP-Server-Identifier = 193.93.72.40 Sending DHCP-Offer Id ee2f4270 from 193.93.72.40:67 to 193.93.72.41:68 (0) Finished request Waking up in 0.3 seconds. Waking up in 4.6 seconds. (0) Cleaning up request packet ID 3996074608 with timestamp +23 Ready to process requests db records are: mysql> select * from radcheck; +----+-------------------+--------------------+----+-------+ | id | username | attribute | op | value | +----+-------------------+--------------------+----+-------+ | 1 | 00:16:3e:c3:3a:d1 | Cleartext-Password | := | | mysql> select * from radreply; +----+-------------------+----------------------+----+-----------------+ | id | username | attribute | op | value | +----+-------------------+----------------------+----+-----------------+ | 1 | 00:16:3e:c3:3a:d1 | DHCP-Your-IP-Address | = | 193.93.72.41 | | 2 | 00:16:3e:c3:3a:d1 | DHCP-Subnet-Mask | = | 255.255.255.192 | | 20 | 00:16:3e:c3:3a:d1 | DHCP-Domain-Name | = | radiolan.sk | | 17 | 00:16:3e:c3:3a:d1 | DHCP-Router-Address | = | 193.93.72.30 | maybe it is simple thing. Can you please help me figuret ou what is wrong. Many thanks Best regards Bubulak p.s.: sorry for my english

5 11

Re: Beginner need help
by A.L.M.Buxey＠lboro.ac.uk 22 Sep '14

22 Sep '14

Hi, > radiusd.conf file. Please tell me what shall I not modify in radiusd.conf in the first instance, NONE of it. your primary cause of failure is this: #$INCLUDE sites-enabled/ WHY did you comment that out? without the virtual servers stuff the server will do nothing. alan

1 0

Re: Beginner need help
by Himanshu Pandey 22 Sep '14

22 Sep '14

Hi, I modified users configuration file and radiusd.conf. I have attached radiusd.conf file. Please tell me what shall I not modify in radiusd.conf file. Actually I did some modifications in radiusd.conf file since I was getting some error in starting the radius server. Please help. Regards,Sonu From: Alan DeKok <aland(a)deployingradius.com> Sent: Mon, 22 Sep 2014 17:28:24 To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Subject: Re: Beginner need help Himanshu Pandey wrote: > WARNING: Empty authorize section.  Using default return values. > ERROR: No authenticate method (Auth-Type) found for the request: > Rejecting the user > Failed to authenticate the user.  You edited the configuration files and broke the server.  Don't do that.  Use the default configuration.  IT WORKS. > rad_recv: Access-Request packet from host 127.0.0.1 port 45789, id=134, > length=77 > Attr-1 = 0x74657374696e67 > Attr-2 = 0xc0f304d7505a307640e393d9f8f2778a > Attr-4 = 0x7f000001 > Attr-5 = 0x00000714 > Attr-80 = 0x6ae5985f22e2b42ff6127ba33df73a62  That's entirely wrong.  You've put a lot of work into destroying the server configuration.  I don't understand why people do this.  Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Re: Beginner need help
by A.L.M.Buxey＠lboro.ac.uk 22 Sep '14

22 Sep '14

Hi, > WARNING: Empty authorize section. Using default return values. you've edited config files from the default install? there are only 2 files you need to edit from an install to get the basic stuff working users file clients.conf file butchering other files will only lead you to failure until you understand more about the server and how parts of it operate alan

1 0

Re: Beginner need help
by Alan DeKok 22 Sep '14

22 Sep '14

Himanshu Pandey wrote: > WARNING: Empty authorize section. Using default return values. > ERROR: No authenticate method (Auth-Type) found for the request: > Rejecting the user > Failed to authenticate the user. You edited the configuration files and broke the server. Don't do that. Use the default configuration. IT WORKS. > rad_recv: Access-Request packet from host 127.0.0.1 port 45789, id=134, > length=77 > Attr-1 = 0x74657374696e67 > Attr-2 = 0xc0f304d7505a307640e393d9f8f2778a > Attr-4 = 0x7f000001 > Attr-5 = 0x00000714 > Attr-80 = 0x6ae5985f22e2b42ff6127ba33df73a62 That's entirely wrong. You've put a lot of work into destroying the server configuration. I don't understand why people do this. Alan DeKok.

1 0

Reference ${thread[pool].max_servers} not found
by Haviaras Kostas 22 Sep '14

22 Sep '14

Hello, I need your help about the error I am getting, when I configure the sql in my Freeradius server 3.0.4: The error I am getting is: command: sudo freeradius -X Output: freeradius: FreeRADIUS Version 3.0.4, for host i686-pc-linux-gnu, built on Sep 22 2014 at 10:14:56 Copyright (C) 1999-2014 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /usr/share/freeradius/dictionary including dictionary file /usr/share/freeradius/dictionary.dhcp including dictionary file /usr/share/freeradius/dictionary.vqp including dictionary file /etc/freeradius/dictionary including configuration file /etc/freeradius/radiusd.conf including configuration file /etc/freeradius/proxy.conf including configuration file /etc/freeradius/clients.conf including configuration file /etc/freeradius/sql No such configuration item thread[pool].max_servers /etc/freeradius/sql[178]: Reference "${thread[pool].max_servers}" not found Errors reading or parsing /etc/freeradius/radiusd.conf Thanks for your attention and time

3 2

Re: Beginner need help
by Himanshu Pandey 22 Sep '14

22 Sep '14

Hi, I am getting the following error: WARNING: Empty authorize section.  Using default return values.ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the userFailed to authenticate the user. Here is the debug log: FreeRADIUS Version 2.2.0, for host x86_64-redhat-linux-gnu, built on Dec 15 2012 at 00:26:26Copyright (C) 1999-2012 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ...including configuration file /etc/raddb/radiusd.confincluding configuration file /etc/raddb/proxy.confincluding configuration file /etc/raddb/clients.confincluding files in directory /etc/raddb/modules/including configuration file /etc/raddb/modules/ldapincluding configuration file /etc/raddb/modules/inner-eapincluding configuration file /etc/raddb/modules/digestincluding configuration file /etc/raddb/modules/checkvalincluding configuration file /etc/raddb/modules/dynamic_clientsincluding configuration file /etc/raddb/modules/echoincluding configuration file /etc/radd! b/modules/expirationincluding configuration file /etc/raddb/modules/etc_groupincluding configuration file /etc/raddb/modules/pamincluding configuration file /etc/raddb/modules/opendirectoryincluding configuration file /etc/raddb/modules/sradutmpincluding configuration file /etc/raddb/modules/attr_filterincluding configuration file /etc/raddb/modules/mschapincluding configuration file /etc/raddb/modules/chapincluding configuration file /etc/raddb/modules/exprincluding configuration file /etc/raddb/modules/counterincluding configuration file /etc/raddb/modules/ippoolincluding configuration file /etc/raddb/modules/cuiincluding configuration file /etc/raddb/modules/attr_rewriteincluding configuration file /etc/raddb/modules/detailincluding configuration file /etc/raddb/modules/radrelayincluding configuration file /etc/raddb/modules/rediswhoincluding configuration file /etc/raddb/modules/preprocessincluding configuration file /etc/raddb/modules/ntlm_authincluding configuration f! ile /etc/raddb/modules/krb5including configuration file /etc/raddb/mod ules/smbpasswdincluding configuration file /etc/raddb/modules/filesincluding configuration file /etc/raddb/modules/realmincluding configuration file /etc/raddb/modules/sqlcounter_expire_on_loginincluding configuration file /etc/raddb/modules/sohincluding configuration file /etc/raddb/modules/wimaxincluding configuration file /etc/raddb/modules/linelogincluding configuration file /etc/raddb/modules/alwaysincluding configuration file /etc/raddb/modules/papincluding configuration file /etc/raddb/modules/smsotpincluding configuration file /etc/raddb/modules/logintimeincluding configuration file /etc/raddb/modules/dhcp_sqlippoolincluding configuration file /etc/raddb/sql/mysql/ippool-dhcp.confincluding configuration file /etc/raddb/modules/mac2vlanincluding configuration file /etc/raddb/modules/otpincluding configuration file /etc/raddb/modules/redisincluding configuration file /etc/raddb/modules/radutmpincluding configuration file /etc/raddb/modules/detail.example.comincluding c! onfiguration file /etc/raddb/modules/replicateincluding configuration file /etc/raddb/modules/execincluding configuration file /etc/raddb/modules/passwdincluding configuration file /etc/raddb/modules/acct_uniqueincluding configuration file /etc/raddb/modules/mac2ipincluding configuration file /etc/raddb/modules/cacheincluding configuration file /etc/raddb/modules/sql_logincluding configuration file /etc/raddb/modules/perlincluding configuration file /etc/raddb/modules/detail.logincluding configuration file /etc/raddb/modules/unixincluding configuration file /etc/raddb/modules/policyincluding configuration file /etc/raddb/eap.confincluding configuration file /etc/raddb/policy.confmain { allow_core_dumps = no}including dictionary file /etc/raddb/dictionarymain { name = "radiusd" prefix = "/usr/local" localstatedir = "/usr/local/var" sbindir = "/usr/local/sbin" logdir = "/usr/local/var/log/radius" run_dir = "/usr/local/var/run/radiusd" libdir = "/usr/local/lib" radacctdir = "/! usr/local/var/log/radius/radacct" hostname_lookups = no max_request_ti me = 30 cleanup_delay = 5 max_requests = 1024 pidfile = "/usr/local/var/run/radiusd/radiusd.pid" checkrad = "/usr/local/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes }}radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = yes zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4  coa { irt = 2 mrt = 16 mrc = 5 mrd = 30  } } home_server_pool my_auth_failover { type = fail-ov! er home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { }radiusd: #### Loading Clients #### client 127.0.0.1 { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" }radiusd: #### Instantiating modules #### instantiate { }radiusd: #### Loading Virtual Servers ####server { # from file /etc/raddb/radiusd.conf modules { } # modules} # serverradiusd: #### Opening IP addresses and Ports ####listen { type = "auth" ipaddr = * port = 0}listen { type = "acct" ipaddr = * port = 0} ... adding new socket proxy address * port 58346Listening on authentication address * port 1812Listening on accounting address * port 1813Listening on proxy address * port 1814Ready to process requests.rad_recv: Access-Request packet from host 127.0.0.1 port 45789, id=134, length=77 Attr-1 = 0x74657374696e67 Attr-2 = 0xc0f304d7505a307640e393d9f8f2778a Attr-4 = 0x7f000001 ! Attr-5 = 0x00000714 Attr-80 = 0x6ae5985f22e2b42ff6127ba33df73a62  WARNING: Empty authorize section.  Using default return values.ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the userFailed to authenticate the user.  WARNING: Unprintable characters in the password.  Double-check the shared secret on the server and the NAS!Delaying reject of request 0 for 1 secondsGoing to the next requestWaking up in 0.9 seconds.Sending delayed reject for request 0Sending Access-Reject of id 134 to 127.0.0.1 port 45789Waking up in 4.9 seconds.Cleaning up request 0 ID 134 with timestamp +248Ready to process requests. Please help. Regards,Himanshu From: Amit Linux <amitbutere64(a)gmail.com> Sent: Mon, 22 Sep 2014 16:01:44 To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Subject: Re: Beginner need help Hi Himanshu,I believe radtest and radclient totally different utility for different purpose. Plus use should post debug output and config you using. RegardsAmit B.HTH Sent from my iPhone On 22-Sep-2014, at 14:42, "Himanshu  Pandey" <pandey_himanshu80(a)rediffmail.com> wrote: Hi, My freeradius server is up and running and then I tried to execute the test with a following command: radtest testing password localhost 0 testing123 But I am getting error:radclient:: Unknown attribute "User-Name" requires a hex string, not "testing"radclient: Nothing to send. Please help to resolve the same. Regards,Sonu From: A.L.M.Buxey(a)lboro.ac.uk Sent: Mon, 22 Sep 2014 14:17:00 To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Subject: Re: Beginner need help Hi, > Now I want to test this client (I have already installed freeradius server on the same LINUX PC and this server proved to be working). there are various client testing tools with the main freeradius server package - also eapol_test from the wpa_supplicant package is very useful! > The only useful information on the freeradius client is > > radiusclient [-f config_file] [-p nas_port] [-s | [-a] a1=v1 [a2=v2[...[aN=vN]...]]] -f the config file - theres one supplied...should be in your /etc directory now. then you feed it a list of VSA/TLV values. not as friendly as eg eapol_test or radclient alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Get your own FREE website, FREE domain & FREE mobile app with Company email.  Know More >- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Re: Beginner need help
by Amit Linux 22 Sep '14

22 Sep '14

Hi Himanshu, I believe radtest and radclient totally different utility for different purpose. Plus use should post debug output and config you using. Regards Amit B. HTH Sent from my iPhone > On 22-Sep-2014, at 14:42, "Himanshu Pandey" <pandey_himanshu80(a)rediffmail.com> wrote: > > Hi, > > My freeradius server is up and running and then I tried to execute the test with a following command: > > radtest testing password localhost 0 testing123 > > But I am getting error: > radclient:: Unknown attribute "User-Name" requires a hex string, not "testing" > radclient: Nothing to send. > > Please help to resolve the same. > > Regards, > Sonu > > From: A.L.M.Buxey(a)lboro.ac.uk > Sent: Mon, 22 Sep 2014 14:17:00 > To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> > Subject: Re: Beginner need help > Hi, > > > Now I want to test this client (I have already installed freeradius server on the same LINUX PC and this server proved to be working). > > there are various client testing tools with the main freeradius server package - also eapol_test from the > wpa_supplicant package is very useful! > > > The only useful information on the freeradius client is > > > > radiusclient [-f config_file] [-p nas_port] [-s | [-a] a1=v1 [a2=v2[...[aN=vN]...]]] > > -f the config file - theres one supplied...should be in your /etc directory now. then you feed it a list of VSA/TLV values. > > not as friendly as eg eapol_test or radclient > > alan > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > > Get your own FREE website, FREE domain & FREE mobile app with Company email. > Know More > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Re: Freeradius-Users Digest, Vol 113, Issue 86
by KAVYA PRABHAKAR 22 Sep '14

22 Sep '14

Hi, "If you check rad client from remote machine the case will be different." I have binded my Radius client ip and port in clients.conf and in radiusd.conf. My radius server and client is present in two different PCs. Will that be a prob? Now in debug mode log looks like this: Cleaning up request 33 ID 108 with timestamp 541fd188 Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 10.253.6.11:1645, id=1, length=53 NAS-IP-Address = 11.6.253.10 User-Name = "raduser" User-Password = "k\014%\220\2779\213\203\307\030\222\364\004qM\223" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 34 modcall[authorize]: module "preprocess" returns ok for request 34 radius_xlat: '../var/log/radius/radacct/ 10.253.6.11/auth-detail-20140922.log' rlm_detail: ../var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d.log expands to ../var/log/radius/radacct/10.253.6.11/auth-detail-20140922.l modcall[authorize]: module "auth_log" returns ok for request 34 modcall[authorize]: module "chap" returns noop for request 34 modcall[authorize]: module "mschap" returns noop for request 34 rlm_realm: No '@' in User-Name = "raduser", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 34 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 34 users: Matched entry DEFAULT at line 170 modcall[authorize]: module "files" returns ok for request 34 rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 34 modcall: leaving group authorize (returns ok) for request 34 rad_check_password: Found Auth-Type System auth: type "System" ERROR: Unknown value specified for Auth-Type. Cannot perform requested action. auth: Failed to validate the user. Login incorrect: [raduser/k\014%\220\2779\213\203\307\030\222\364\004qM\223] (from client private-network-3 port 0) WARNING: Unprintable characters in the password. ? Double-check the shared secret on the server and the NAS! Delaying request 34 for 1 seconds Finished request 34 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 1 to 10.253.6.11 port 1645 Waking up in 4 seconds... rad_recv: Access-Request packet from host 10.253.6.11:1645, id=1, length=53 Sending duplicate reply to client private-network-3:1645 - ID: 1 Re-sending Access-Reject of id 1 to 10.253.6.11 port 1645 --- Walking the entire request list --- Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 34 ID 1 with timestamp 541fd3a6 Nothing to do. Sleeping until we see a request. Thanks, Kavya On Mon, Sep 22, 2014 at 1:57 PM, < freeradius-users-request(a)lists.freeradius.org> wrote: > Send Freeradius-Users mailing list submissions to > freeradius-users(a)lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to > freeradius-users-request(a)lists.freeradius.org > > You can reach the person managing the list at > freeradius-users-owner(a)lists.freeradius.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Users digest..." > > > Today's Topics: > > 1. Re: Beginner need help (Himanshu Pandey) (KAVYA PRABHAKAR) > 2. Re: Beginner need help (Himanshu Pandey) (Amit Linux) > 3. 3.0.4: proxy-to-vserver and proxied post-auth? (Stefan Winter) > 4. Re: Beginner need help (Himanshu Pandey) (A.L.M.Buxey(a)lboro.ac.uk) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 22 Sep 2014 13:10:54 +0530 > From: KAVYA PRABHAKAR <kavyamelinmaneprabhakar(a)gmail.com> > To: freeradius-users(a)lists.freeradius.org > Subject: Re: Beginner need help (Himanshu Pandey) > Message-ID: > <CANpdVrz8yFuvUP55vtjdiX0hBRq6RQQ5wajb94LsJ=- > 2XWHYxw(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > Hi, > > I am beginner. I installed Freeradius in my windows PC. > With default configuration it works as expected. > > Now I have a RADIUS client which will send request to server and I want > server to authenticate the same. > > I should be changing users.conf > > raduser User-Password == "Password" > where User-name = "raduser" and Password = "Password" > > I will have to change clients.conf as well. > > client <ipaddr/mask>{ > secret = secret > shortname = client name # what is the significance of shortname > } > > In radiusd.conf, I have changed to which Ip and port RADIUS server has to > listen to. (optional) > > After doing respective changes, I will execute following command: > > radtest raduser Password 10.253.6.11 1812 Password > > The result is as follows: > > C:\FreeRADIUS.net\bin>radclient.exe -d ..\etc\raddb -f radtest.txt -x -s > 127.1 au > th testing123 > Sending Access-Request of id 108 to 127.0.0.1 port 1812 > User-Name = "testuser" > User-Password = "testpw" > NAS-IP-Address = 127.0.0.1 > NAS-Port = 123 > rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=108, length=20 > > Total approved auths: 1 > Total denied auths: 0 > Total lost auths: 0 > > Here I would like to know why am I getting reply from 127.0.0.1 when I have > explicitly asked to receive from 10.253.6.11 > > PFA the debug log. > > Thanks in advance, > Kavya >

3 2

Re: Beginner need help
by Himanshu Pandey 22 Sep '14

22 Sep '14

Hi, My freeradius server is up and running and then I tried to execute the test with a following command: radtest testing password localhost 0 testing123 But I am getting error:radclient:: Unknown attribute "User-Name" requires a hex string, not "testing"radclient: Nothing to send. Please help to resolve the same. Regards,Sonu From: A.L.M.Buxey(a)lboro.ac.uk Sent: Mon, 22 Sep 2014 14:17:00 To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Subject: Re: Beginner need help Hi, > Now I want to test this client (I have already installed freeradius server on the same LINUX PC and this server proved to be working). there are various client testing tools with the main freeradius server package - also eapol_test from the wpa_supplicant package is very useful! > The only useful information on the freeradius client is > > radiusclient [-f config_file] [-p nas_port] [-s | [-a] a1=v1 [a2=v2[...[aN=vN]...]]] -f the config file - theres one supplied...should be in your /etc directory now. then you feed it a list of VSA/TLV values. not as friendly as eg eapol_test or radclient alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0